Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
File:                     XpNr6hsMOiCKuifYsQsnXkdN3iw.mft (raw, json)
Hash identifier:          4cn9lPy4UQrx2w0k0eko0y6aJbAtTgtLlA8ydBP6ocQ=
Subject key identifier:   0A:01:08:86:51:E6:1C:FA:16:6D:25:C8:BD:A9:67:2C:E9:59:96:19
Authority key identifier: 5E:93:6B:EA:1B:0C:3A:20:8A:BA:27:D8:B1:0B:27:5E:47:4D:DE:2C
Certificate issuer:       /CN=5e936bea1b0c3a208aba27d8b10b275e474dde2c
Certificate serial:       01962E98937A3DCB68F6A281F875AC7C7540
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:13 +0000
Files and hashes:         1: XpNr6hsMOiCKuifYsQsnXkdN3iw.crl (hash: fMxLwdNlXrDZYYPp+jizJZE/NfWKW2DTBcbvqYA0XQA=)
                          2: stcblJCloKrq21i-3tGdy209Cks.roa (hash: sV8E479KWjrK8MD/w/N9wPnQZDPeZCzIYkOl03vwH+Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:93:7a:3d:cb:68:f6:a2:81:f8:75:ac:7c:75:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e936bea1b0c3a208aba27d8b10b275e474dde2c
        Validity
            Not Before: Apr 13 10:01:13 2025 GMT
            Not After : Apr 14 10:01:13 2025 GMT
        Subject: CN=0a01088651e61cfa166d25c8bda9672ce9599619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fb:20:32:c7:d3:0e:ed:2a:ad:1a:4d:7b:8d:
                    25:75:8c:a9:b9:5a:fa:f0:34:b9:42:48:92:a1:24:
                    a6:cb:fc:7e:00:c7:5f:94:33:19:b3:d0:6b:53:3c:
                    30:35:80:70:1d:90:18:fe:52:63:e5:75:90:d4:41:
                    ee:94:1e:d2:ff:75:29:50:4f:d0:7f:37:e3:b2:97:
                    a0:4d:28:e5:2b:87:66:cf:28:0c:e5:d2:66:ef:59:
                    11:57:e0:45:e9:65:86:b9:ba:9c:6d:12:79:c3:64:
                    3c:12:62:7e:e1:09:e0:1a:09:5f:28:b0:af:36:33:
                    e3:46:b8:82:5d:16:f7:b1:76:6b:e8:15:09:e6:8e:
                    15:41:63:74:a1:48:f6:3f:c9:64:ab:20:b9:5a:63:
                    2c:53:92:84:2a:e7:c6:7b:7e:00:e6:ad:5c:ed:96:
                    ae:ad:ab:77:20:53:3f:92:51:b4:6a:8d:18:fb:18:
                    d4:5c:c8:b5:15:7a:51:89:73:3b:32:91:03:30:2e:
                    5f:e3:39:a3:67:f7:ba:ff:30:a6:2d:ed:53:57:76:
                    aa:9a:d0:ad:b3:9d:1a:80:5e:2f:10:52:6d:1e:b3:
                    ca:64:d3:5d:50:ed:1d:7c:5f:05:8e:30:38:75:86:
                    0f:ac:ab:24:f8:a4:3b:d1:41:0b:1b:cc:f9:6b:bc:
                    d2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:01:08:86:51:E6:1C:FA:16:6D:25:C8:BD:A9:67:2C:E9:59:96:19
            X509v3 Authority Key Identifier:
                keyid:5E:93:6B:EA:1B:0C:3A:20:8A:BA:27:D8:B1:0B:27:5E:47:4D:DE:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:c3:74:c8:a0:0b:dd:e4:35:35:1c:d8:d8:ea:3d:50:cb:13:
         5b:ed:81:a2:70:fa:76:8d:7c:f2:eb:75:f3:19:08:38:17:ae:
         02:36:df:a1:b4:86:c3:a2:05:2e:a7:c0:6e:d7:bc:c2:a8:5d:
         84:0e:35:ef:ce:0b:67:c8:2b:a5:aa:21:4c:12:fe:4f:fe:9f:
         fc:54:50:72:bd:7c:cd:94:a4:bd:03:fc:14:83:55:c9:c0:94:
         52:a3:d2:a6:4f:dc:bc:61:a7:70:87:42:5e:42:6d:a9:50:06:
         70:ac:4a:56:ab:44:c6:41:f3:df:23:9a:6d:26:82:7c:4a:d7:
         8a:55:49:2f:8f:2a:92:c8:27:6e:0a:92:47:6f:d9:4a:fb:71:
         1b:7a:82:54:06:20:da:eb:2b:ea:ba:f5:69:f0:d2:16:ab:c4:
         2b:7a:a1:c3:5c:fe:89:31:2f:ca:c1:db:bb:84:a6:d8:9a:a8:
         65:5f:0f:52:ea:1a:dd:f4:1d:8e:4c:32:f7:44:1b:cd:cd:6f:
         50:92:71:e1:c6:f3:ca:48:37:61:5e:f2:f1:66:ef:24:b6:c0:
         e4:a4:8c:35:b9:ee:e7:8f:b8:e0:9f:d9:72:43:5a:31:42:a1:
         4a:c6:ce:67:7f:cb:45:bb:94:e7:fa:f5:47:9e:49:8b:bf:64:
         eb:9b:42:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumJN6Pcto9qKB+HWsfHVAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlOTM2YmVhMWIwYzNhMjA4YWJhMjdkOGIxMGIyNzVlNDc0
ZGRlMmMwHhcNMjUwNDEzMTAwMTEzWhcNMjUwNDE0MTAwMTEzWjAzMTEwLwYDVQQD
EygwYTAxMDg4NjUxZTYxY2ZhMTY2ZDI1YzhiZGE5NjcyY2U5NTk5NjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/sgMsfTDu0qrRpNe40ldYypuVr6
8DS5QkiSoSSmy/x+AMdflDMZs9BrUzwwNYBwHZAY/lJj5XWQ1EHulB7S/3UpUE/Q
fzfjspegTSjlK4dmzygM5dJm71kRV+BF6WWGubqcbRJ5w2Q8EmJ+4QngGglfKLCv
NjPjRriCXRb3sXZr6BUJ5o4VQWN0oUj2P8lkqyC5WmMsU5KEKufGe34A5q1c7Zau
rat3IFM/klG0ao0Y+xjUXMi1FXpRiXM7MpEDMC5f4zmjZ/e6/zCmLe1TV3aqmtCt
s50agF4vEFJtHrPKZNNdUO0dfF8FjjA4dYYPrKsk+KQ70UELG8z5a7zSqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAoBCIZR5hz6Fm0lyL2pZyzpWZYZMB8GA1UdIwQY
MBaAFF6Ta+obDDogiron2LELJ15HTd4sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHBOcjZoc01PaUNLdWlmWXNRc25Ya2ROM2l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8zMjg3NmItYTgyYi00NzA0LWJhNjct
OTg0NzdhODY1M2M3LzEvWHBOcjZoc01PaUNLdWlmWXNRc25Ya2ROM2l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS8zMjg3NmItYTgyYi00NzA0LWJhNjctOTg0NzdhODY1M2M3
LzEvWHBOcjZoc01PaUNLdWlmWXNRc25Ya2ROM2l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhcN0yKAL
3eQ1NRzY2Oo9UMsTW+2BonD6do188ut18xkIOBeuAjbfobSGw6IFLqfAbte8wqhd
hA41784LZ8grpaohTBL+T/6f/FRQcr18zZSkvQP8FINVycCUUqPSpk/cvGGncIdC
XkJtqVAGcKxKVqtExkHz3yOabSaCfErXilVJL48qksgnbgqSR2/ZSvtxG3qCVAYg
2usr6rr1afDSFqvEK3qhw1z+iTEvysHbu4Sm2JqoZV8PUuoa3fQdjkwy90Qbzc1v
UJJx4cbzykg3YV7y8WbvJLbA5KSMNbnu54+44J/ZckNaMUKhSsbOZ3/LRbuU5/r1
R55Ji79k65tCkA==
-----END CERTIFICATE-----